Lucene search
+L

1753 matches found

Vulnrichment
Vulnrichment
added 2025/10/15 5:02 p.m.17 views

CVE-2025-62378 CommandKit exposes incorrect command name in context object for message command aliases

CommandKit is the discord.js meta-framework for building Discord bots. In versions 1.2.0-rc.1 through 1.2.0-rc.11, a logic flaw exists in the message command handler that affects how the commandName property is exposed to both middleware functions and command execution contexts when handling...

6.1CVSS6.7AI score0.00163EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/15 5:02 p.m.28 views

CVE-2025-62378

CommandKit (Discord.js meta-framework) versions 1.2.0-rc.1 through 1.2.0-rc.11 expose ctx.commandName as the alias used to invoke a message command, rather than the canonical command name. This affects both middleware and the command’s own run context, enabling potential misapplication of permiss...

6.1CVSS6.7AI score0.00163EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/15 5:02 p.m.24 views

CVE-2025-62378 CommandKit exposes incorrect command name in context object for message command aliases

CommandKit is the discord.js meta-framework for building Discord bots. In versions 1.2.0-rc.1 through 1.2.0-rc.11, a logic flaw exists in the message command handler that affects how the commandName property is exposed to both middleware functions and command execution contexts when handling...

6.1CVSS0.00163EPSS
SaveExploits0References1
OSV
OSV
added 2025/10/15 5:02 p.m.10 views

CVE-2025-62378 CommandKit exposes incorrect command name in context object for message command aliases

CommandKit is the discord.js meta-framework for building Discord bots. In versions 1.2.0-rc.1 through 1.2.0-rc.11, a logic flaw exists in the message command handler that affects how the commandName property is exposed to both middleware functions and command execution contexts when handling...

6.1CVSS7.1AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/10/14 12:00 a.m.10 views

AlmaLinux 9 : kernel (ALSA-2025:17377)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:17377 advisory. kernel: security/keys: fix slab-out-of-bounds in keytaskpermission CVE-2024-50301 kernel: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB...

8.8CVSS7.2AI score0.00283EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2025/10/13 5:43 p.m.15 views

CommandKit has incorrect command name exposure in context object for message command aliases

Impact A logic flaw exists in the message command handler of CommandKit that affects how the commandName property is exposed to both middleware functions and command execution contexts when handling command aliases. When a message command is invoked using an alias, the ctx.commandName value...

6.1CVSS7.1AI score0.00163EPSS
SaveExploits0References4Affected Software1
RedHat Linux
RedHat Linux
added 2025/10/09 8:21 a.m.12 views

FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA

A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA...

9.1CVSS5.7AI score0.00556EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/10/09 8:21 a.m.24 views

FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA

A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA...

9.1CVSS5.7AI score0.00556EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/10/09 8:15 a.m.12 views

FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA

A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA...

9.1CVSS5.7AI score0.00556EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/10/09 8:04 a.m.11 views

FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA

A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA...

9.1CVSS5.7AI score0.00556EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/10/09 8:04 a.m.12 views

FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA

A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA...

9.1CVSS5.7AI score0.00556EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/10/08 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2025-54289

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions a...

8.1CVSS6.1AI score0.00207EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/10/08 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2025-54291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in images API in Canonical LXD before 6.5 and 5.21.4 on all platforms allows unauthenticated remote attackers to determine project...

6.9CVSS6AI score0.00386EPSS
SaveExploits1References3
OSV
OSV
added 2025/10/07 4:15 p.m.13 views

UBUNTU-CVE-2022-50538

In the Linux kernel, the following vulnerability has been resolved: vme: Fix error not catched in fakeinit In fakeinit, rootdeviceregister is possible to fail but it's ignored, which can cause unregistering vmeroot fail when exit. general protection fault, probably for non-canonical address...

5.5CVSS5.9AI score0.00159EPSS
SaveExploits0References12
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2019-4335

Malware in sbrugna...

7.1CVSS7.1AI score0.00516EPSS
SaveExploits0References25
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2016-3355

Malware in sbrugna...

5.5CVSS6.8AI score0.00386EPSS
SaveExploits0References12
EUVD
EUVD
added 2025/10/07 12:30 a.m.13 views

EUVD-2014-3575

Malware in sbrugna...

5.5CVSS6.6AI score0.00595EPSS
SaveExploits1References20
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2020-5245

Malware in sbrugna...

7.5CVSS6.5AI score0.02354EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2016-10195

Malware in sbrugna...

6CVSS7.2AI score0.00467EPSS
SaveExploits0References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2012-2913

Malware in sbrugna...

1.9CVSS6.1AI score0.00442EPSS
SaveExploits0References14
Rows per page
Query Builder